$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft File: POusQFclHIqquVTcIgsiSWvu9WM.mft (raw, json) Hash identifier: 4q5ruBGC+GHf0F6wWw1hR/eGhlUTkdFigtN/Rd74kKA= Subject key identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Certificate serial: 03C5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft Manifest number: 03B8 Signing time: Wed 30 Jul 2025 10:08:49 +0000 Manifest this update: Wed 30 Jul 2025 10:08:49 +0000 Manifest next update: Fri 01 Aug 2025 10:08:49 +0000 Files and hashes: 1: POusQFclHIqquVTcIgsiSWvu9WM.crl (hash: nS9nIAdrMRNz4RoZ/ZOxELJ426OI7bGN2bYDkS373/A=) 2: XC4Us5letSN9wSAxml54Gor9YVA.roa (hash: DuQyRZJyC/4CPp02vlagbKqPh1oZOnwzCnVn2HW+gqQ=) 3: juiwpCIDvIAphERKA7ryIbUCp6A.roa (hash: 7iS7IE8nK4IGzaVTM0DTiryjMO5B+V9utqs5ZmjJejA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Validity Not Before: Jul 30 10:08:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8CD023F29E25DE9D3BBA766BB4D1201BA7074DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:c8:2c:ab:24:28:82:73:e4:d4:7b:89:27: 22:a9:1c:80:9a:96:6e:19:52:cb:4c:30:68:87:42: 7f:4e:6d:9d:c7:f8:91:a0:af:55:5e:9d:a6:a5:5f: be:57:be:b8:69:95:fe:cd:2a:2d:8c:8a:73:01:61: 27:8a:8b:b4:22:c7:68:ed:bb:be:57:3b:e3:b6:e7: bd:b0:d0:c5:f0:64:ec:c1:48:5f:27:ce:ec:17:59: c0:57:3d:1c:ac:d2:70:13:2c:dc:64:24:13:19:51: cb:c3:d8:3c:35:6e:7e:e2:25:78:bd:36:23:42:fd: dc:7e:29:ba:73:59:ca:ab:eb:92:f8:89:39:4f:fe: f2:ee:10:fa:b9:32:81:2a:e6:1f:35:ec:ae:0f:f3: 70:7d:6e:0b:d6:6b:e4:ff:c4:9f:5a:85:db:63:50: ee:bf:f1:90:62:e9:2e:16:48:cf:c5:d6:e4:99:51: 45:57:ca:3f:14:60:e7:04:a6:06:ac:b0:ef:1c:24: 89:ca:f0:d5:b8:6f:73:20:ec:1f:42:6c:8e:fc:2c: 5d:2d:52:ab:1f:9f:ae:54:46:79:29:40:62:f5:08: da:05:bd:5b:c8:2f:d3:93:6b:00:b7:53:e3:9b:ec: c6:ad:f7:cc:f7:66:91:a7:9c:87:6f:01:ce:89:24: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB X509v3 Authority Key Identifier: keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:35:9d:e9:22:65:3d:54:e2:3b:f5:1f:1d:70:c5:76:1b:e9: 0d:27:03:2f:56:f0:2d:fc:5e:9c:67:1a:43:d6:5b:14:35:fb: 5e:eb:d4:77:2e:d8:05:c4:5c:56:11:e1:03:44:03:5a:6f:d2: c0:52:27:77:0a:e6:ac:7d:9b:71:dc:d8:5a:5d:ff:26:96:6c: d9:ff:e5:e9:4d:e6:6d:c8:b0:22:4e:96:e3:50:ea:94:c8:35: 1f:63:20:75:ac:eb:f7:c2:fd:74:f1:82:99:9e:dd:d5:2c:bc: b6:b2:1a:c3:12:a5:58:0c:8a:d3:e7:a7:e5:7a:2e:29:0e:21: 1a:69:b8:4c:e8:7b:1a:17:b8:0a:05:6f:06:7b:2b:5a:b3:83: 54:c8:8d:50:12:35:f7:23:d6:41:28:fb:bc:3c:21:7e:6a:01: a8:91:a8:dd:76:de:36:31:e9:f0:f5:f7:d8:02:21:f7:c8:bd: 0c:52:84:c7:87:15:27:af:e0:88:6e:54:a1:7a:b0:c1:b6:72: a5:0e:a6:06:5c:53:ea:12:8b:5c:39:f2:41:a6:84:6a:af:eb: f0:b0:66:2e:0d:03:b7:69:74:07:2f:37:e5:d9:20:d4:03:3c: 3f:61:c9:05:52:7b:cf:2f:c6:bf:38:d4:a5:e2:43:e8:b2:86: 3e:87:22:98 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNTA3MzAx MDA4NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4Q0QwMjNGMjlFMjVE RTlEM0JCQTc2NkJCNEQxMjAxQkE3MDc0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkSMgsqyQognPk1HuJJyKpHICalm4ZUstMMGiHQn9ObZ3H+JGg r1VenaalX75Xvrhplf7NKi2MinMBYSeKi7Qix2jtu75XO+O2572w0MXwZOzBSF8n zuwXWcBXPRys0nATLNxkJBMZUcvD2Dw1bn7iJXi9NiNC/dx+KbpzWcqr65L4iTlP /vLuEPq5MoEq5h817K4P83B9bgvWa+T/xJ9ahdtjUO6/8ZBi6S4WSM/F1uSZUUVX yj8UYOcEpgassO8cJInK8NW4b3Mg7B9CbI78LF0tUqsfn65URnkpQGL1CNoFvVvI L9OTawC3U+Ob7Mat98z3ZpGnnIdvAc6JJIy5AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUyM0CPyniXenTu6dmu00SAbpwdNswHwYDVR0jBBgwFoAUPOusQFclHIqquVTc IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvUE91c1FGY2xI SXFxdVZUY0lnc2lTV3Z1OVdNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGk1nekiZT1U4jv1Hx1wxXYb6Q0nAy9W8C38XpxnGkPWWxQ1+17r1Hcu 2AXEXFYR4QNEA1pv0sBSJ3cK5qx9m3Hc2Fpd/yaWbNn/5elN5m3IsCJOluNQ6pTI NR9jIHWs6/fC/XTxgpme3dUsvLayGsMSpVgMitPnp+V6LikOIRppuEzoexoXuAoF bwZ7K1qzg1TIjVASNfcj1kEo+7w8IX5qAaiRqN123jYx6fD199gCIffIvQxShMeH FSev4IhuVKF6sMG2cqUOpgZcU+oSi1w58kGmhGqv6/CwZi4NA7dpdAcvN+XZINQD PD9hyQVSe88vxr841KXiQ+iyhj6HIpg= -----END CERTIFICATE-----Generated at Thu Jul 31 18:10:51 2025 by rpki-client